---
id: "CVE-2023-25717"
kind: "vulnerability"
aliases: ["CVE-2023-25717"]
title: "Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Ruckus Wireless Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "ruckuswireless ruckus wireless admin", "fixed": [], "affected": "<= 10.4", "ecosystem": "vendor"}, {"name": "ruckuswireless smartzone ap", "fixed": ["6.1.0.0.9240"], "affected": "< 6.1.0.0.9240", "ecosystem": "vendor"}, {"name": "ruckuswireless smartzone ap", "fixed": ["5.2.2.0.2064"], "affected": "< 5.2.2.0.2064", "ecosystem": "vendor"}, {"name": "ruckuswireless smartzone ap", "fixed": ["3.6.2.0.795"], "affected": "< 3.6.2.0.795", "ecosystem": "vendor"}, {"name": "ruckuswireless smartzone ap", "fixed": ["6.1.1.0.1274"], "affected": "< 6.1.1.0.1274", "ecosystem": "vendor"}, {"name": "commscope ruckus smartzone firmware", "fixed": ["5.2.1.3"], "affected": "< 5.2.1.3", "ecosystem": "vendor"}, {"name": "commscope ruckus smartzone firmware", "fixed": [], "affected": "= 6.1.0.0.935", "ecosystem": "vendor"}, {"name": "commscope ruckus smartzone firmware", "fixed": ["5.2.1.3.1695"], "affected": "< 5.2.1.3.1695", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "ruckus", "smartzone", "wireless-access-point", "zonedirector"]
not_affected_if: ["web-services-disabled"]
published_at: "2023-02-13T20:15:10+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-25717", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25717", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as…

Ruckus Wireless access point software has an unspecified flaw in its web services component that allows cross-site request forgery and remote code execution. Per the description, an attacker can run code on the device when the web services component is enabled.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Ruckus Wireless Multiple Products affected ? fixed ?
- vendor:ruckuswireless ruckus wireless admin affected <= 10.4 fixed ?
- vendor:ruckuswireless smartzone ap affected < 6.1.0.0.9240 fixed 6.1.0.0.9240
- vendor:ruckuswireless smartzone ap affected < 5.2.2.0.2064 fixed 5.2.2.0.2064
- vendor:ruckuswireless smartzone ap affected < 3.6.2.0.795 fixed 3.6.2.0.795
- vendor:ruckuswireless smartzone ap affected < 6.1.1.0.1274 fixed 6.1.1.0.1274
- vendor:commscope ruckus smartzone firmware affected < 5.2.1.3 fixed 5.2.1.3
- vendor:commscope ruckus smartzone firmware affected = 6.1.0.0.935 fixed ?
- vendor:commscope ruckus smartzone firmware affected < 5.2.1.3.1695 fixed 5.2.1.3.1695

## How to check

Check whether the web services component is enabled on the Ruckus AP or controller (ZoneDirector, SmartZone, or Solo); the sources do not give the exact setting or command.

## Fix

Apply updates per vendor instructions, or disconnect the product if it is end-of-life (per CISA required action); the sources do not name fixed versions.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-25717
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-25717

## From the sources

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

CISA required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_